[Touch Pro CDMA] intimateangel:
*** The method below is pretty much illegal everywhere.. Nobody is responsible for what you do with your Touch Pro.. As long as you are not using this method for devious means and/or not using the same ESN number for two different phones you are probably safe.. ***

*** This post is in the interest of the general public who are stuck with phones with bad esn numbers. This can probably save your phone from being just another unusable junk. xdadevelopers is not responsible for this post nor am I ***

A step by step guide to unlock, supercid, change the ESN and MEID on the SPRINT CDMA HTC Touch Pro.

Here is the link to the required files

4shared.com/file/WX8UxA0G/Needed_Files.html

The most important file out of this is the Radio because only with that radio can we change the ESN(which is illegal)i

This change will survive a full ##786# reset.

Please do a backup of your contacts, messages etc. I recommend PIM Backup

I would like to say thanks to all those people in different forums who helped me by giving me information.

If it wasn't for them i would have been stuck with a 20k handset which would be conspicuously sitting on my shelf

1. Put the phone in diag mode by dialing ##3424#

2. If you dont know your SPC/MSL code get it from the attacked BAFMSL which needs NetCF 3.5 to work.

3. Flash your phone with Raphael_CDMA_HSPL_025_MFG.exe

4. Let phone re-start. Unplug usb cable from phone.

5. Disable USB connection in Active Sync by unchecking checkbox in Connection Settings of Active Sync.

6. Hold Power button, Volume Down button and push reset button to boot the phone in bootloader mode.

7. Connect Phone's USB cable to PC again.

8. Run mtty.exe

9. Change the port to 'USB' and hit OK

In the window that opens up, type the following commands (All Commands are case Sensitive) Hit enter after typing. You may see nothing while typing, just type carefully.

10. rtask a

11. echo_on

12. readCID

13. writeCID 00000000

14. readCID (window should return CID as 00000000)

15. rtask c (will probably give and error)

16. Soft reset phone and close mtty.

17. Re-enable USB connection in connection settings of ActiveSync. Make sure phone is 'connected' to ActiveSync, you might have to unplug and plug in usb to make this happen.

18. Flash phone with Raphael_CDMA_HSPL_037.exe

19. Let phone restart.

20. Copy supplied radio rom RAPHIMG.nbh to your storage card.

21. Hold Power button, Volume Down button and push reset button to boot the phone in bootloader mode. It should now display the option to go ahead and load the image file. Press the PWR button to continue.

22. When it is complete, soft reset.

23. Put your phone into diag mode (##3424#)

24. Launch DFS.

25. Select your phone's com port.

26. Select 6950 from the devices menu.

27. Ignore any errors at the bottom of the screen about equipment file not found etc... Once the com port is connected, go to the MEID section and 0 out the dec or hex fields (Fill one of the fields with 0's. Ignore the pESN that it creates.

DO NOT put anything in the ESN field.

Click Write and it will write it to the phone no matter what it says at the bottom.

28. Close DFS and soft reset.

29. When your phone re-starts, you can open the dialer, select menu, select device info and you should see your MEID is now 0's.

30. Go into diag mode ##3424# again.

31. Open up the attached CDMA Workshop 2.7 and select the com port to connect your phone.

32. Go to the security tab and click read by the ESN. It should display your current ESN.

33. Type the ESN that you want in the phone and click write.(Illegal)

34. Close CDMA Workshop and soft reset.

Once everything is done flash back to a regular radio. The radio we flashed for changing the ESN number cannot be used for normal purposes.

35. Place your first call from your 'repaired' device. All should be fine. If not, check your account settings, mdn, msid, prl etc.

IMPORTANT: As long as the meid remains as all 000s, you can go straight into cdma workshop 2.7 and change the esn again. If you do a ##786# reset, your meid and esn will return to original manufacturer settings and you will have to go back to step 20. It will survive a regular hard reset, rom flash etc.

If you are happy with your phone in this state, flash a new radio and program your data settings.

If you are sure you are all done with the number changing etc or need/want the correct meid in there that will survive the thermonuclear ##786# reset, go back into dfs (Step 24) and write the proper MEID for your new pesn. ***HOWEVER***, this will lock the pesn in and from what I have read, will not allow it to be changed again.. Flash a new radio and program your data settings.

Please do a hard reset once everything is done..